21679309873be168cb88ca0e83b9ed6a130eedd8b619b042da6591bec959aee3

Sharing

Copy URL Twitter E-mail

General

Target
wizread-1.0.15-setup.exe
Size 135.8MB
Sample260715-vnmsraht7q
SHA256 21679309873be168cb88ca0e83b9ed6a130eedd8b619b042da6591bec959aee3
MD5 7e5d44957e81af848399889cf5a24e65
SHA1 35777f3e11fee20680c6ebbbca408c98f90e0ea3
SHA512 eac13207a012d0b1069892b0d8caf55b2d84ec4624d051bce3b4147d6cd3e68fc153a9e9cbad623c8384f13c6b913328b2dff30e42456f4e569df119673ab68a
SSDEEP 1572864:gEqjEtTQ3rABCLklr0T6QxbyaPGmuCb1f2XllzKTqs5drdXeUKwo0R73xJH+Bp:gHojCLJEfvvLW555dXJ9N5/m
TLSH
T1E368331CA41A4263E75454F75EC2F33697F30D0AAEC74CAA31ACE55A67D322D203F926
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution

Malware Config

Targets

- Target
  wizread-1.0.15-setup.exe
- Size 135.8MB
- SHA256 21679309873be168cb88ca0e83b9ed6a130eedd8b619b042da6591bec959aee3
- MD5 7e5d44957e81af848399889cf5a24e65
- SHA1 35777f3e11fee20680c6ebbbca408c98f90e0ea3
- SHA512 eac13207a012d0b1069892b0d8caf55b2d84ec4624d051bce3b4147d6cd3e68fc153a9e9cbad623c8384f13c6b913328b2dff30e42456f4e569df119673ab68a
- SSDEEP 1572864:gEqjEtTQ3rABCLklr0T6QxbyaPGmuCb1f2XllzKTqs5drdXeUKwo0R73xJH+Bp:gHojCLJEfvvLW555dXJ9N5/m
- TLSH
  T1E368331CA41A4263E75454F75EC2F33697F30D0AAEC74CAA31ACE55A67D322D203F926
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH
  T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH
  T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH
  T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral5
- Target
  LICENSES.chromium.html
- Size 8.7MB
- SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
- MD5 edaeffe92dbfd973958c9d2267201b32
- SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
- SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
- SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
- TLSH
  T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral6
- Target
  WizRead.exe
- Size 180.1MB
- SHA256 ede31ac8014933a01a60bc3c5752d7eb48298b4617844c59dbd56844f1b21723
- MD5 1676bb9ce9fad387a216dd432a90eba5
- SHA1 18b4f475f686d9503ba37fb129ca59ba9dcd7a49
- SHA512 83853206cca6231ac4fdee5851414b64edfffae197d23a7cb2c79df2b4c036fdde21cb347aff61d76f0043d3390b6e7b0d0c254513dec5a18dd5c0dbf943bed9
- SSDEEP 1572864:wH0f0gqxb0WBFh/LVO9dyKcRmAswCXj5EtV4ga5h0q2ZOADpAyK5/Y3P8kbVr+qI:1sok+hK7
- TLSH
  T128988C03F39A50D9E01DD1B58B9B9633EAB1B8854324A2DF27540B512F77EE86B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  d3dcompiler_47.dll
- Size 4.7MB
- SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
- MD5 a7b7470c347f84365ffe1b2072b4f95c
- SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
- SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
- SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
- TLSH
  T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  ffmpeg.dll
- Size 2.8MB
- SHA256 4fcdedbc68eae4b4cfe0eed275316fdf66c9d4a57a98d29a77d0e8f4149cfcbc
- MD5 e3bdb59b37b730647d4a1e44756a730d
- SHA1 bb435a479fa6956f3d091c927d12c2f71e433c35
- SHA512 891a72c6091ef4fde7a373f6df0f1e39d40bce67a1a7f8509782c6373baf481a73276051b77d5946875d1ff449ca23083635e4f4030058f7b1bfe35135a1c98c
- SSDEEP 49152:0FUWNgdIjHFoDr2XlKVDdusGH6qfLgvsI74i3OQ+Jhp:0F2IDq3CYVDdufU4i6hp
- TLSH
  T178D5AE03F6D950DDD029C075979F9223F671344A8F1266EF26E05A202E67FD86E3E329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral9
- Target
  libEGL.dll
- Size 481KB
- SHA256 d9d2f5b5fae60a63523f92c07539dd93893ff7d9ffa41f0bb57caca4be9f2220
- MD5 c13e55ae6200e74c0b121cbd5c1d323d
- SHA1 098675729109e19a0b6cbedbbf45398265ab6644
- SHA512 b7f802afd0e195c47cb4014b2af2a532781648367c2fc6695d2142afa6b65a35c699a4bea9eef5694e01ec863b3c259a9a3bdead4d889195a9b22dfea7461f1b
- SSDEEP 6144:43f2CrNZCHZWHCxmx0vfbjj306LhQQ3WU3y0iSj/88Pg:6vQ0CxmqvfbjLTQRU3y0iSA8o
- TLSH
  T14FA49E15B3E444B9E06AD174CA534642DB76B4920F69FBDF03A492392F37BE85B39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10
- Target
  libGLESv2.dll
- Size 8.0MB
- SHA256 4b4dcbc7bb19449ec89d2bf06e7b05af9352a4e6f97f4444183dc3080e6c0f1d
- MD5 a3bf08772053b66ec34701037f120736
- SHA1 b1b8d9e35d9ea517fe435f33056e8d2ff868cc6e
- SHA512 67b294ddcbc1b26c65c252ebfb1d770b81df380e27b2b9d95be6d540c6c017ca7d5f700e42e6b41dcc52866f3b32382e3b88b585cf5793e5decb5d905d2fb539
- SSDEEP 98304:O9aDUngXCAFxUrAYF8V3tcUl1XMX43vlOA:OCO5k33X4svl
- TLSH
  T1CB867C03F69580D9D00DE2B9975B9627FA3078840728B6CF269417192F7BFE0AB7E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11
- Target
  resources/app.asar.unpacked/node_modules/better-sqlite3/deps/download.sh
- Size 3KB
- SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
- MD5 cf1d12194f2ffaadb8152502571c19a1
- SHA1 68777900b2d533d72ae32ede40862a0db8196791
- SHA512 8b20362f71c1ead34bb448d9acf31ccade3ead4c3fab326e7abc4617c0abb1a56a36eecc3218ad87e43af8289c8bf0280469c0e59dd1d0f6d5cc3246a6a1730c
- TLSH
  T1118160F7A789067D24C70069A12D62CABA23C32F8B7478485089566C0530AE45FBACFF
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral12
- Target
  resources/app.asar.unpacked/node_modules/better-sqlite3/lib/database.js
- Size 4KB
- SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
- MD5 633100cb9dec3e4ae1c672c0b494fbfb
- SHA1 185d7fd4070157aa1eb4ad0fc53c362ae649030e
- SHA512 1ef6d19f98b38ac368ddeefa58d8f8a8e064e6402dd95d9b6e3b7a847c41cbd0f46dbb72646d27d01eb7b7f3200419c7ef8003b9ff53c9bfca76a71d22423a7c
- SSDEEP 48:+FzYIUZFeVxWy3h9zxIEXMOK0ZHQZ27euTqQaqE8E+LC7yIGrhxtjFvcLd3s03Mb:ac1ZFjQBG1oQZi9qSvBBkLveomRz
- TLSH
  T1E9817384DBF5641247EB30D4A674A48D6234D27971AD08E0C8CBC3F531E50C9BBE3B66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/backup.js
- Size 2KB
- SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
- MD5 69638dc10c19961a0c05350ae333d6a4
- SHA1 5941988b67c6fa083358002ba36538f1e39ad03b
- SHA512 495ecffdadbc8c9bb2e886f9f7a93668fa5b2192a0ba79a7e1a9d3c2640e0520e39f2d2c6f3a26b55c72ff882bff43ed6439c0ad7c7622461e6ccaf1ee8f119a
- TLSH
  T171413158F39E5169436734C04490E00EE93DD6B6313E09F1AC8953F022C66CDE9DBBC5
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral14
- Target
  resources/app.asar.unpacked/node_modules/better-sqlite3/lib/methods/serialize.js
- Size 625B
- SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
- MD5 41cfeffe67a2975f68aeeaaed0bf384c
- SHA1 321f3f817bc095c34b76d060d706ed2cc48f204d
- SHA512 8a0ad9732b5a07866eee742b2e884e521111f213af9ae39ebd92fa029d88f087c43f8826672d1fac5c571d14b284f20ae25e12aa4058a7881d6fd5e93c0b0a0c
- TLSH
  T1F5F0783A3365564B0997A0C050E1B429E9B5D324312D68A0E989C3F511D48CEEAF7B9F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  resources/app.asar.unpacked/node_modules/better-sqlite3/lib/sqlite-error.js
- Size 717B
- SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
- MD5 e1372372ca8f94dd66666d886a81f9b5
- SHA1 437034e71dedf15013967b540db157cbe3eac3ef
- SHA512 5bbfce635aa1b10b30f1703eded4256224500705e3b14c7cefcd522ad703596d15d6cfee7914dd70700827afd01a50d61bef1954d29b8788bf6347f96e9cd8d4
- TLSH
  T1660168C69F7099BB01E15884FC116806996C5678C021B5E4B6C8DD9F2DF0087CDA56A0
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral16
- Target
  resources/app.asar.unpacked/node_modules/canvas/browser.js
- Size 986B
- SHA256 4d6c07ad6f588ba02e250ed9467bac8a5615712b12c138c1fa6f4a3c5b0927e4
- MD5 74fa60baf8985d29cb9b26bb12c19c15
- SHA1 750eede543afb54ab154079428ec2c2ebbf30e42
- SHA512 b8ead23b888a21939d5b4233ba880b51e31bdf4623e47fec4271dc9153f1fe5e96de3f05339907f3bde37fb512905b54ec407cd88ebb8cfeabd759eeea642710
- TLSH
  T12411AB1639FAA539071370D370BFC004F8E18C0725295B506D5ADA00FF22674263A7BE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17
- Target
  resources/app.asar.unpacked/node_modules/canvas/build/Release/libbrotlidec.dll
- Size 60KB
- SHA256 46713275af60f374f76059eddf2ff6e4347db8f6c6723c9404682d1197367448
- MD5 5b2714efe0439ea9e8673ce0a608c1db
- SHA1 16205a9d0d9cda8586a57bf1e934887067fc2863
- SHA512 8a1d7569bd10c1a549ff0749dafe881d79274750c16480f78416b8bc8c70999dedc66059b213bbb0b02c953e086aaf5c57296041710db4e1027b0f85fcc5454b
- SSDEEP 1536:bB9THuMX7hrQjOMIZEIIKWUMTklkn5UvF3X6c:bB1hrWsZzyTk2n5qF31
- TLSH
  T123533B22B6A3A8ADDF5B813896D3DB73F73A7C051315EB374180F6322E22E605E5C425
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral18
- Target
  resources/app.asar.unpacked/node_modules/canvas/index.js
- Size 2KB
- SHA256 f8f5b5b7e4c24248b6a3d50758dd7cceae5de25cf0122d9b2d73241a3e3f523d
- MD5 1b8c5308d3c0735caeb014f9ef355b39
- SHA1 904cd368810e5c44a605939b6b2474543390f298
- SHA512 58c7b8e94469184c058908cde8859e4cfa3cd78d80c90b5714f5c55c0314a94382bbf8067e02c87844a6eacb805364e145b2483104c0e0963e16446edde4e639
- TLSH
  T1B251951E76DEF0FD1EA42185754ED101DB938333311696E49586E7F53BE61102B32BA4
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/DOMMatrix.js
- Size 19KB
- SHA256 ba311a386284eaf44abec878c9171f7234b68c7d5707246194c2edca90aa150c
- MD5 da1aab7bc59bd1afab5b3bee0964f089
- SHA1 4d846fda9d065eba331503bd3e0ae0c973e62ea9
- SHA512 c89cfecfc43060cb7cbfe19be609e8b76a1620c54a450d3c1a98e96230e400726b80778ad1e7d06768bc1b5d472c76be966c6c74c692354857497f754ff5b78c
- SSDEEP 384:+Oqtbve8YNGjglPPb6T1IlW8fHpgoB9cgms:+OeveiecgB
- TLSH
  T1699242B173E62225138FD1780DDE5845D22C90773E0A4E5DF4BC21A46F6B41C93BA6ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/bindings.js
- Size 1KB
- SHA256 6eae82a0892ba1bd136e70ff1ac9c018d5df562d06226571e2dfda252a92609b
- MD5 bd2d1bba37200aa6d8c1bc28a7617e61
- SHA1 878b8e0e3b447ad5216dfa06d38b01b09dbe881c
- SHA512 f0b890400ab7e4be390316b168caa6ff26c87f0a75a09ea91f64cf199db6bf94fe89fa3a65b2386495dbd2ce4b0be3cf77f88b998b8904fe0f7be3b22c5b89cc
- TLSH
  T176116A70FD3ABCBB21F08140980EED34F14517B140FB79F9D6A8D989785E98996D8B0E
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/canvas.js
- Size 3KB
- SHA256 2fb274bbccc5e8d5b225c61748f3f7f0788248160c7e7e3a1fc368188ca0c0fe
- MD5 66eb9da1a26c5cb1e805b9ada6b385c6
- SHA1 e9aba1b43cd3b2800ffebbbfc95a347d5b5fa755
- SHA512 0a999d9dfc251d14a4d8de0cee2cf479f6c22beec9bdb4a9f4bbb1b7630b657832ea13308ea8e058821feb221796b9377f46fcf60be831f56ab4cb456fadcb34
- TLSH
  T13E61BA9535F171737A7260F1054F584CE2AAC0132589DA26B68E86F1AFD1060EAF3FF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral22
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/context2d.js
- Size 205B
- SHA256 0d6dc0b5ac3a3e62e07b41f6f9251bd25d5754ced5f186a1d5a745848d895312
- MD5 3d45d43511de2cb8e8e3ce02bc2db150
- SHA1 146048664958796220be1ffb843dfe159fd7a618
- SHA512 629acb9df16882a96b4a789651a55f02fb668cef02119ab093af3716d770cb5391735e34e2567aa2f3fe3ea20e6a2ff7d8b07045b612cdf11818f71dca7be0d2
- TLSH
  T197D0227964393B8E23D881A4820DEE8BD9C680B1240799E34C4CCB883CD4C883A71CCE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral23
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/image.js
- Size 2KB
- SHA256 7202e776c6ed6a88d85350cc1ffa94f47e48cf17d7455774bf085a1d2cdc2fb7
- MD5 102d24e5d3f72069213aad92bdabc6df
- SHA1 d51f007815e8c70f74dd45ec25c0e7db2b68c193
- SHA512 8c68ff23cc957532df39f09dd02374918f0f5ffa5af7cdfbe5f6eefe86b983abd6d5842148c323a7709b99602d443f3b51a13e7ff45e57a09c5b48bc3d9d8e81
- TLSH
  T1E751525E16FA20790363B4F41E45A549F422902F941B4E8EBC5D8290BFE1E7900B1EFC
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral24
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/jpegstream.js
- Size 874B
- SHA256 875de5c950c8ff9e6e5c0cf7290ba3743679ab39f9c884e855ee9a904b210a85
- MD5 72530fc5fe21cbb5159e3ff3ff9eb1a1
- SHA1 5377ff94cea8839d4302db4426898dc929514ec7
- SHA512 ab9c2fb89f0d9925972933a394cba380ad9c3f758266a86cd6a63be59c5b95c292a2643c30414cbb66df023d3480631d2767f1392cb9776548869da0427de80a
- TLSH
  T15611881D53BE3365864365B70D8E220AE270C05B381F9905398DD7C46F2C8364172FBA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/pattern.js
- Size 292B
- SHA256 e8e56dd111a54192e47207c41f7a3cc11d80d78b59eb2183c15ad70e12ac6b78
- MD5 772d2e84a12a0483d679d0df2c38d476
- SHA1 5700c9ffe29f0f22357f60adfc0f192a70698f9e
- SHA512 8ad065b391edcf181de55218c4e87b1e59fb5a72b1af6c4110de7e59d483c383c952e07cbeba338caa2a9edaecad81cbd57297b4252371848df27c288ec5800f
- TLSH
  T138E0C268F4B87A0D22CE10988A0DF949D6D8C2B01CC318C3888CC3846C1AD0AA668D8F
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral26
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/pdfstream.js
- Size 679B
- SHA256 ece1325525df874b6300cb118cb01dd36988a90804158594c499b6340f8a6f73
- MD5 70bda101fffde77728f87e1c6e92d0ff
- SHA1 16701ca6f9d30ba2b519ce72e1b8ceb2a7bda96a
- SHA512 74b09f13049fbc1ac8882aacfa80ac92379d79ad96f1bc02d293c2e5dbe19be244287e2e77e7543d048488e030fc078fb1d4228c197078ef68501bd183bc9f4a
- TLSH
  T13C01492A23BE2269E28364E60D89130AE2A0C00B381EA545749ED7C45F3C8364173FF9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27
- Target
  resources/app.asar.unpacked/node_modules/canvas/lib/pngstream.js
- Size 940B
- SHA256 cf071c7c433208b783755c0921ce933517559e25377d43d0aa4106d627dca2b4
- MD5 8fff1183ffc9998b6f0833f66f797804
- SHA1 e16548eb1fe5ba047e7819fea3fdd1212ab3663a
- SHA512 d229ecb65acfb107542da88ca2abb391af7188b9ac21b285f069a10749adb9e30be3b2c4129a4e7fff31535b236d513de9c20784a23fa94fc7e169c8923caffd
- TLSH
  T1A311DC4913B9231186A366E60D4E124AF270C01B785FA941788C97D4AF2C93681B3FA9
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral28
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH
  T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29
- Target
  $PLUGINSDIR/nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH
  T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  $PLUGINSDIR/nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH
  T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral31
- Target
  $R0/Uninstall WizRead.exe
- Size 172KB
- SHA256 6da891e5f9315b145fd40cd0e53fe076d29a42797df415793212761665742b36
- MD5 4561a7010fd3d14643e8e87b74ebe261
- SHA1 f8b795dc4591c29e8ab8c9bf8b29f22a744db9ca
- SHA512 6dfe7009d8c33da2ac3990d3c3dbde747d8e72794e95897ec395d8352b1298e6e34c87df8f0a51ef1db9628acc2782b85ff0dae4d69914ef58a5856bd7816de6
- SSDEEP 3072:en77v00hEoDEtau5x2nubH/dXQTk8FTgi5a2MNUa8b32tvhOEA1RJCir86SrSrvs:e740IpY+dXQT7FB52Ua8T2t0EyL+yaF
- TLSH
  T19704F12073A0D67BF4FB8F710BBA53A71BB6F121152917436B902B4D7823294DE1D392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Enumerates processes with tasklist
  discovery
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32